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CLAIMS 



What is claimed is: 

5 

1 . A method for accessing a data processing system behind a network address translation 
(NAT) enabled network, comprising: 



querying, from a client system located outside a NAT enabled network, a NAT device for 
10 an address of a NAT data processing system located behind said NAT enabled network; 



automatically routing said query through said NAT device to a DNS server, wherein said 
DNS server retums an address for said NAT data processing system and source routing for said 
NAT device; and 

15 

sending packets, from said client system to said NAT data processing system at said 
address with source routing through said NAT device, such that said NAT data processing 
system behind said NAT enabled network is directly accessed by said client system from outside 
said NAT enabled network. 



20 
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2. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network, wherein said querying a NAT device for an addresses of a NAT data processing 
system further comprises: 

5 receiving a user request to establish a connection with a particular domain name, wherein 

said domain name identifies said NAT data processing system; and 

sending a DNS query of said domain name to said NAT device. 

10 3. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network, wherein said querying a NAT device for an addresses of a NAT data processing 
system further comprises: 

sending, from said client system, a DNS query for a domain name of said NAT data 
1 5 processing system to a first address; and 

responsive to receiving a fail signal, sending, from said client system, said DNS query to 
a second address accessed from a resolv.conf file, wherein said second address is a location for 
said NAT device. 
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4. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network wherein automatically routing said query through said NAT device to a DNS 

server, further comprises: 

automatically routing said query through a pre-selected port of said NAT device for 
handling DNS queries. 

5. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network wherein automatically routing said query through said NAT device to a DNS 
server, further comprises: 

automatically routing said query to said DNS server that stores at least one private 
address for at least one private system located behind said NAT enabled network and said source 
routing for said NAT device. 
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6. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network further comprising: 

returning, from said DNS server, a plurality of addresses of a plurality of parallel data 
5 processing systems to said NAT data processing system located behind said NAT enabled 
network; and 

responsive to receiving a fail signal from an attempt to send packets to said NAT data 
processing system, sending packets to a first data processing system from among said plurality of 
10 parallel data processing systems at one of said plurality of address with source routing through 
said NAT device. 

7. The method according to claim 1 for accessing a data processing system behind a NAT 
enabled network further comprising: 

15 

authenticating an identity of a user at said client system; 

only allowing access to said NAT data processing system if said authenticated identity of 
said user matches one of a plurality of authenticated users enabled to access systems behind said 
20 NAT enabled network. 
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5 



8. A system for accessing a data processing system behind a network address translation 
(NAT) enabled network, comprising: 

a client system communicatively connected to a public network; 

a NAT device accessible to said public network and accessible to at least one NAT data 
processing system located in a NAT enabled network behind said NAT device; 



querying means for querying said NAT device, from said client system, for an address of 
1 0 a particular NAT data processing system located behind said NAT enabled network from among 
said at least one NAT data processing system; 

routing means for automatically routing said query through said NAT device to a DNS 
server, wherein said DNS server returns an address for said NAT data processing system and 
1 5 source routing for said NAT device; and 

transmission means for sending packets, from said client system to said particular NAT 
data processing system at said address with source routing through said NAT device. 
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9. The system according to claim 8 for accessing a data processing system behind a NAT 
enabled network, wherein said querying means further comprises: 

receipt means for receiving a user request to establish a connection with a particular 
5 domain name, wherein said domain name identifies said NAT data processing system; and 

transmission means for sending a DNS query of said domain name to said NAT device. 

1 0. The system according to claim 8 for accessing a data processing system behind a NAT 
1 0 enabled network, wherein said querying means further comprises: 

transmission means for sending, from said client system, a DNS query for a domain name 
of said NAT data processing system to a first address; and 

15 transmission means for sending, from said client system, said DNS query to a second 

address accessed from a resolv.conf file, wherein said second address is a location for said NAT 
device, responsive to receiving a fail signal. 

1 1 . The system according to claim 8 for accessing a data processing system behind a NAT 
20 enabled network wherein said DNS server is communicatively connected to said NAT device 

through a preselected port for routing address queries. 
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12. The system according to claim 8 for accessing a data processing system behind a NAT 
enabled network wherein said routing means further comprises: 

5 means for automatically routing said query to said DNS server that stores at least one 

private address for at least one private system located behind said NAT enabled network and said 
source routing for said NAT device. 

13. The system according to claim 8 for accessing a data processing system behind a NAT 
1 0 enabled network further comprising: 

means for returning, from said DNS server, a plurality of addresses of a plurality of 
parallel data processing systems to said NAT data processing system located behind said NAT 
enabled network; and 

15 

transmission means for sending packets to a first data processing system from among said 
plurality of parallel data processing systems at one of said plurality of address with source 
routing through said NAT device, responsive to receiving a fail signal from an attempt to send 
packets to said NAT data processing system. 
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14. The system according to claim 8 for accessing a data processing system behind a NAT 
enabled network further comprising: 

means for authenticating an identity of a user using said client system at said NAT 

5 device; 

means for only allowing access to said NAT data processing system if said authenticated 
identity of said user matches one of a plurality of authenticated users enabled to access systems 
behind said NAT enabled network. 
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15. A computer program product for accessing a data processing system behind a network 
address translation (NAT) enabled network, comprising: 

a recording medium; 

5 

means, recorded on said recording medium, for querying a NAT device for an address of 
a NAT data processing system located behind said NAT enabled network; 

means, recorded on said recording medium, for automatically routing said query through 
1 0 said NAT device to a DNS server, wherein said DNS server returns an address for said NAT data 
processing system and source routing for said NAT device; and 



15 



means, recorded on said recording medium, for sending packets to said NAT data 
processing system at said address with source routing through said NAT device. 
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1 6. The computer program product according to claim 1 5 for accessing a data processing 
system behind a NAT enabled network, wherein said means for querying a NAT device for an 
addresses of a NAT data processing system further comprises: 

5 means, recorded on said recording medium, for receiving a user request to establish a 

connection with a particular domain name, wherein said domain name identifies said NAT data 
processing system; and 

means, recorded on said recording medium, for sending a DNS query of said domain 
1 0 name to said NAT device. 

17. The computer program product according to claim 15 for accessing a data processing 
system behind a NAT enabled network, wherein said means for querying a NAT device for an 
addresses of a NAT data processing system further comprises: 

15 

means, recorded on said recording medium, for sending, fi"om said client system, a DNS 
query for a domain name of said NAT data processing system to a first address; and 

means, recorded on said recording medium, for sending said DNS query to a second 
20 address accessed fi-om a resolv.conf file, wherein said second address is a location for said NAT 
device, responsive to receiving a fail signal from said first address. 
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ls. The computer program product according to claim 1 5 for accessing a data processing 
system behind a NAT enabled network wherein said means for automatically routing said query 
through said NAT device to a DNS server, further comprises: 

means, recorded on said recording medium, for automatically routing said query through 
a pre-selected port of said NAT device for handling DNS queries. 

19. The computer program product according to claim 1 5 for accessing a data processing 
system behind a NAT enabled network wherein said means for automatically routing said query 
through said NAT device to a DNS server, further comprises: 

means, recorded on said recording medium, for automatically routing said query to said 
DNS server that stores at least one private address for at least one private system located behind 
said NAT enabled network and said source routing for said NAT device. 
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20. The computer program product according to claim 1 5 for accessing a data processing 
system behind a NAT enabled network further comprising: 

means, recorded on said recording medium, for returning a plurality of addresses of a 
5 plurality of parallel data processing systems to said NAT data processing system located behind 
said NAT enabled network; and 

means, recorded on said recording medium, for sending packets to a first data processing 
system firom among said plurality of parallel data processing systems at one of said plurality of 
1 0 address with source routing through said NAT device, responsive to receiving a fail signal from 
an attempt to send packets to said NAT data processing system. 

2 1 . The computer program product according to claim 1 5 for accessing a data processing 
system behind a NAT enabled network further comprising: 

15 

means, recorded on said recording medium, for authenticating an identity of a user using 
said client system at said NAT device; 



20 



means, recorded on said recording medium, for only allowing access to said NAT data 
processing system if said authenticated identity of said user matches one of a plurality of 
authenticated users enabled to access systems behind said NAT enabled network. 



